QR Code function

[zero80472]

Hi , im using this in a large org and wish to understand what permisions are used to do the QR code scanning as part of the org we cant allow just anyone to beable to scan or open screencapture perms

Regards
Z

[Sneezry]

By default, the extension is granted access only to the active tab upon clicking its icon.

When activated, it can capture the region highlighted in green. However, the areas marked in red remain inaccessible and cannot be captured through the extension's icon click.

• Related code:

  Authenticator/src/background.ts

  Lines 62 to 129 in 2145edc

  	chrome.tabs.captureVisibleTab(tab.windowId, { format: "png" }, (dataUrl) => {
  	contentTab = tab;
  	const qr = new Image();
  	qr.src = dataUrl;
  	qr.onload = () => {
  	const devicePixelRatio = qr.width / windowWidth;
  	const captureCanvas = document.createElement("canvas");
  	captureCanvas.width = width * devicePixelRatio;
  	captureCanvas.height = height * devicePixelRatio;
  	const ctx = captureCanvas.getContext("2d");
  	if (!ctx) {
  	return;
  	}
  	ctx.drawImage(
  	qr,
  	left * devicePixelRatio,
  	top * devicePixelRatio,
  	width * devicePixelRatio,
  	height * devicePixelRatio,
  	0,
  	0,
  	width * devicePixelRatio,
  	height * devicePixelRatio
  	);
  	const url = captureCanvas.toDataURL();
  	const qrReader = new QRCode();
  	qrReader.callback = (
  	error: string,
  	text: {
  	result: string;
  	points: Array<{
  	x: number;
  	y: number;
  	count: number;
  	estimatedModuleSize: number;
  	}>;
  	}
  	) => {
  	if (error) {
  	console.error(error);
  	const qrImageData = ctx.getImageData(
  	0,
  	0,
  	captureCanvas.width,
  	captureCanvas.height
  	);
  	const jsQrCode = jsQR(
  	qrImageData.data,
  	captureCanvas.width,
  	captureCanvas.height
  	);
  	if (jsQrCode) {
  	getTotp(jsQrCode.data);
  	} else {
  	if (!contentTab || !contentTab.id) {
  	return;
  	}
  	const id = contentTab.id;
  	chrome.tabs.sendMessage(id, { action: "errorqr" });
  	}
  	} else {
  	getTotp(text.result);
  	}
  	};
  	qrReader.decode(url);
  	};
  	});
  	}

• tabs.captureVisibleTab() API reference: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureVisibleTab

[zero80472]

this is the same refreance for Chrome;/edge right

also dose the PNG use file:// to load (not good with js coding)

[Sneezry]

this is the same refreance for Chrome;/edge right

Yes, Chrome, Firefox, and Edge follow the same policy.

also dose the PNG use file:// to load (not good with js coding)

By default, extensions are not permitted to access the file:// protocol. However, users can grant extensions the Allow access to file URLs permission to enable this access.